CVE-2007-5700 — IBM Lotus Domino vulnerability

3 documents3 sources
Severity
6.3MEDIUMNVD
EPSS
0.4%
top 42.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Lotus Domino
Timeline
PublishedOct 29
Latest updateMay 1

Description

The Evaluate LotusScript method in IBM Lotus Domino before 7.0.3 uses an incorrect security context for @ formula commands in some circumstances, which might allow remote authenticated users to gain privileges and obtain sensitive information.

CVSS vector

AV:N/AC:M/C:C/I:N/A:NExploitability: 6.8 | Impact: 6.9

Affected Packages1 packages

▶NVDibm/lotus_domino4 versions+3

Patches

Patch: secunia.com ↗Patch: www-1.ibm.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-h964-v967-3qvg: The Evaluate LotusScript method in IBM Lotus Domino before 7↗2022-05-01
▶
CVEList
CVE-2007-5700: The Evaluate LotusScript method in IBM Lotus Domino before 7↗2007-10-29
▶
CVE-2007-5700 — IBM Lotus Domino vulnerability | cvebase